Enforce escaping in JS scripts (2/x)

[cedric-anne]

Checklist before requesting a review

• I have read the CONTRIBUTING document.
• I have performed a self-review of my code.
• I have added tests that prove my fix is effective or that my feature works.
• This change requires a documentation update.

Description

Follows #21109.

[cedric-anne]

@cconard96 I did not find how I could use lodash functions (_.*) in vue SFC <template>. Since translation functions (__() for instance) are automatically escaping HTML special chars in the JS context, code like :placeholder="__('A > B')" will display A & B due to the escaping made by __() and the second escaping made by vue.

It is too late now to remove the automatic escaping in translation functions (we should have done it when we remove the automatic escaping of dynamic values). I wanted to use _.unescape(), but it may not be the best option. Could you take a look at it ?

[cconard96]

@cconard96 I did not find how I could use lodash functions (_.*) in vue SFC <template>.

I have our translation functions registered as global properties in js/src/vue/app.js to make them available in templates.

[cedric-anne]

This PR is OK. Tests failure is only related to lack of atoum test classes.